Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          TnM0FvKKpyM2jEIie+fxLJUpZEYXaVCw0KnHBDtpetU=
Subject key identifier:   B4:52:A9:EF:93:CD:FF:BC:E0:C7:71:46:24:92:C7:40:97:26:7D:2F
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       0196B66B9DE3D1DB33ECD7A7F9F1C1C58648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          1534
Signing time:             Fri 09 May 2025 19:00:28 +0000
Manifest this update:     Fri 09 May 2025 19:00:28 +0000
Manifest next update:     Sat 10 May 2025 19:00:28 +0000
Files and hashes:         1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=)
                          2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=)
                          3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=)
                          4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: EogFFRpCelVua6kqvVqTl9+eBIV2g9Vjh+/B+5BCltE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:6b:9d:e3:d1:db:33:ec:d7:a7:f9:f1:c1:c5:86:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: May  9 19:00:28 2025 GMT
            Not After : May 10 19:00:28 2025 GMT
        Subject: CN=b452a9ef93cdffbce0c771462492c74097267d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c6:55:a1:27:31:35:6f:38:97:39:6f:a5:06:
                    35:ef:5f:b8:90:e2:6f:ce:3d:15:b2:a8:83:37:90:
                    18:6c:0a:49:9e:17:95:74:11:c6:b1:3f:5f:4a:5f:
                    37:f6:c2:d4:65:e3:74:28:b0:75:89:6d:d4:d9:89:
                    76:a5:4a:14:5a:f0:6d:23:88:03:7b:5c:ed:67:c0:
                    fd:2b:fa:3e:60:7b:cc:db:db:72:e9:cd:83:8d:88:
                    aa:ff:38:9f:75:84:e5:a7:fd:28:58:78:d7:98:ee:
                    fb:75:5a:22:2f:1b:6b:d6:47:5b:86:f9:10:43:79:
                    0a:9a:10:be:fb:d9:1a:6d:4d:2c:e6:17:7c:99:93:
                    18:17:3c:a6:6f:c9:ca:3e:68:a1:84:e3:54:ab:6e:
                    59:b1:e1:e6:94:be:76:be:5a:92:1e:09:f4:92:72:
                    4a:e3:23:4d:9b:ce:75:93:dc:a7:fe:8e:96:2e:df:
                    f7:9c:85:1f:4b:a2:4d:d1:63:97:45:37:17:71:23:
                    9e:6d:f0:ba:5d:0b:97:86:d6:2a:a1:98:1c:d3:2d:
                    70:15:5e:7b:bc:4f:c0:21:9d:e1:a4:8a:05:a9:ec:
                    fa:6e:f9:6a:67:f8:bd:a8:5d:9e:e8:2d:df:1b:e2:
                    f4:3f:88:bc:4d:f5:b0:97:db:4e:94:60:53:f9:cf:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:A9:EF:93:CD:FF:BC:E0:C7:71:46:24:92:C7:40:97:26:7D:2F
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:85:e8:31:e8:54:57:cd:35:3e:03:4d:a5:a6:fb:5e:4f:9e:
         d8:07:26:58:ec:0a:a9:78:11:ce:22:f1:bd:b9:f5:cb:e8:1d:
         ad:75:2b:69:af:18:61:56:fe:a8:a8:24:89:26:0f:8c:a6:fd:
         36:63:65:84:f2:10:65:80:d7:d9:88:70:ee:91:66:0d:b2:06:
         b5:c8:b5:45:a1:51:fa:68:06:8f:62:c0:83:e5:b1:d4:04:2e:
         d0:25:f8:b6:52:29:ae:5f:93:83:48:98:16:d2:e9:4b:b6:46:
         f0:7d:b2:b9:91:62:af:44:25:b9:ed:7c:75:56:8b:7a:ad:aa:
         e8:5c:35:7e:35:6b:14:79:e3:33:69:6f:ee:a3:dd:46:84:da:
         a7:70:29:4d:86:7b:80:5b:27:00:16:63:f9:d1:66:a1:78:c4:
         9e:55:fb:fb:dc:b5:5c:7d:8a:0c:e5:e3:c3:29:5c:79:98:b6:
         26:b6:27:ab:14:84:f7:01:02:84:ef:61:4d:8c:cb:44:2d:32:
         78:18:d6:4c:1f:cd:6e:9b:f8:88:de:b0:d6:c6:8e:c0:44:8f:
         b9:b7:4a:51:48:ec:9c:3b:38:a3:4c:9a:9c:38:18:b9:24:5a:
         89:20:8d:5b:06:14:96:e8:ec:5e:0f:a3:f5:2c:d8:49:0e:f9:
         b9:7d:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:09 2025 by rpki-client